Film-Tech Forum ARCHIVE: Help:error securing connection between DSS200 and NC900-C?

This is topic Help:error securing connection between DSS200 and NC900-C? in forum Digital Cinema Forum at Film-Tech Forum ARCHIVE.

To visit this topic, use this URL:
https://ft-forum.com/ft/cgi-bin/ubb/ultimatebb.cgi?ubb=get_topic;f=16;t=002464

Posted by Michael Qu (Member # 6702) on 11-02-2015, 06:11 AM:

Hi friends,
I have make up a system with one Dss200 and two NEC NC900-C.
Now,the Dss200 show the info"error securing connection between show store and projector".
I use a router to connect Dss200 and NEC NC900-C.
In Dss200,I use the default network setting(Dss200-192.1168.1.129,primary projector-192.168.1.133,secondary projector-192.168.1.137).And set two projector's ip to match Dss-200's setting.
Now I ping the two projector from the Dss200(Ctrl+alt+F1 to command line),the network is ok.
But the error issue still there.
Any advise how to solve the problem?Or hardware problem?

PS:the Dss200 is an used-one buy from other people.I don't know weather it can make proper securing connect to projector before.The NC900-C is new,and use NC-80DS01-B+ as input board.
Dss200 software version is 4.6.1,will update the software help?
Thanks for all

Posted by Jose Angel Velasco (Member # 4706) on 11-02-2015, 06:19 AM:

It's possible the problem can be the security configuration of the DSS200. The NC900C is a Series 2 projector, and the DSS200, by default, is configured for series 1 projectors.

Posted by Michael Qu (Member # 6702) on 11-02-2015, 06:26 AM:

quote:
t's possible the problem can be the security configuration of the DSS200. The NC900C is a Series 2 projector, and the DSS200, by default, is configured for series 1 projectors.

thanks,Jose.It is right set to series 2.I have try modify to series 1,same error.

Posted by Marco Giustini (Member # 4544) on 11-02-2015, 07:31 AM:

I'm assuming this is a 862-based system as the 745 does not support dual projector (to my knowledge).

Being an old server, what is the encryption being used on the 862 (system/theatre devices/screen server/cat. 862). Does the system work with just one projector?

Upgrading from 4.6 would help anyway. Particularly if it's that 4.6 with flashes every time content is selected (4.6.1-0?).

Posted by Michael Qu (Member # 6702) on 11-02-2015, 09:32 AM:

quote: Marco Giustini
I'm assuming this is a 862-based system as the 745 does not support dual projector (to my knowledge).

Being an old server, what is the encryption being used on the 862 (system/theatre devices/screen server/cat. 862). Does the system work with just one projector?

Upgrading from 4.6 would help anyway. Particularly if it's that 4.6 with flashes every time content is selected (4.6.1-0?).

yes Marco，it is cat.862.
Both projectors are on the network，still error.
I will try to upagrade it.
Thanks

Posted by Marco Giustini (Member # 4544) on 11-02-2015, 10:26 AM:

Remember you need a KDM for it.

I am not suggesting that upgrading will sort that out, just that moving away from 4.6.x won't be a bad idea.

But the other questions still stand.

Posted by Michael Qu (Member # 6702) on 11-02-2015, 10:31 AM:

quote: Marco Giustini
Remember you need a KDM for it.

I am not suggesting that upgrading will sort that out, just that moving away from 4.6.x won't be a bad idea.

But the other questions still stand.

thanks for you reminder.I will send email to Dolby
just have a try [Smile]

Posted by Mike Renlund (Member # 4675) on 11-02-2015, 11:44 AM:

The CAT862 does support dual projector.

Things to check:

1. Do the projectors have Link Decryptors installed? If they do not, then the TLS connection will never succeed.

2. Using the Dolby Media Block Application, connect to the CAT862 and check the box in the lower right hand corner for "Dual Projector Mode". This has the added benefit of putting the server into TLS mode.

Mike Renlund
Dolby Laboratories

Posted by Ian Freer (Member # 1940) on 11-02-2015, 02:06 PM:

quote: Michael Qu
The NC900-C is new,and use NC-80DS01-B+ as input board.

The NC-80DS01 is officially a "SIB without Enigma" and as such does NOT have a link decryptor installed.

The NC-80LB01 is the "SIB with Enigma", so this is the correct board to install for use with Dolby Cat862.

NOTE: The DS01 and LB01 are physically the same as I understand, just one ships with the Enigma and the other ships without it, so it IS possible that the OP's DS01's do have enigma's installed if they have been added after it left the factory, but as he says they are brand new projectors, I anticipate he does not have Enigmas...).

Posted by Marin Zorica (Member # 1716) on 11-02-2015, 04:08 PM:

Also, check for security certificate on projector, i have two times happened with barco series 1 same thing, and problem was that TI board was without certificate, so TLS sesion could not be established. Check can you download certificate from projector, if no, that is problem. And there is tehnical info about getting back certificate in projector to get it work.

Posted by Marco Giustini (Member # 4544) on 11-02-2015, 04:52 PM:

Marin,

AFAIK that only works for Series 1 projectors though. A Series 2 should have no problems establishing a TLS link (assuming there's an enigma of course!)

Posted by Michael Qu (Member # 6702) on 11-02-2015, 06:52 PM:

quote: Mike Renlund
The CAT862 does support dual projector.

Things to check:

1. Do the projectors have Link Decryptors installed? If they do not, then the TLS connection will never succeed.

2. Using the Dolby Media Block Application, connect to the CAT862 and check the box in the lower right hand corner for "Dual Projector Mode". This has the added benefit of putting the server into TLS mode.

Mike Renlund
Dolby Laboratories

Hi mike,could you send an copy of Dolby Media Block Application?I don't have it on site.

quote: Ian Freer
The NC-80DS01 is officially a "SIB without Enigma" and as such does NOT have a link decryptor installed.

The NC-80LB01 is the "SIB with Enigma", so this is the correct board to install for use with Dolby Cat862.

NOTE: The DS01 and LB01 are physically the same as I understand, just one ships with the Enigma and the other ships without it, so it IS possible that the OP's DS01's do have enigma's installed if they have been added after it left the factory, but as he says they are brand new projectors, I anticipate he does not have Enigmas...).

Yes,I have check the manual and it say the DS does not support TLS.
The NEC engineer told to "bypass the enigma",but he also not sure if it will work or not.

Now my work is to confirm is the Cat862 or NC900-C(80DS) course this problem.
thanks all

Posted by Dave Macaulay (Member # 813) on 11-02-2015, 07:16 PM:

"Bypass the enigma" allows you to use the projector for unencrypted content or from an SDI source other than a cinema server.
I think the DSS error is it trying to log in to the enigma to set up encryption, and that is not going to happen - whether you bypass it or not - if the enigma is not there.
I have seen this kind of error on a new installation with a Christie S2: they stopped sending them with an enigma installed unless you specified it... and we didn't know that.
Try single projector with one NEC at a time and see what you get.
Using DCCS to list installed versions, if you don't see any LD version on the NC-80DS01 unit it presumably doesn't have a LD. You can install one in the SIB though, so the model number doesn't guarantee that it is not there.
You will absolutely need the Enigma LD if you want to show encrypted cinema content.

Posted by Michael Qu (Member # 6702) on 11-02-2015, 08:10 PM:

quote: Dave Macaulay
"Bypass the enigma" allows you to use the projector for unencrypted content or from an SDI source other than a cinema server.
I think the DSS error is it trying to log in to the enigma to set up encryption, and that is not going to happen - whether you bypass it or not - if the enigma is not there.
I have seen this kind of error on a new installation with a Christie S2: they stopped sending them with an enigma installed unless you specified it... and we didn't know that.
Try single projector with one NEC at a time and see what you get.
Using DCCS to list installed versions, if you don't see any LD version on the NC-80DS01 unit it presumably doesn't have a LD. You can install one in the SIB though, so the model number doesn't guarantee that it is not there.
You will absolutely need the Enigma LD if you want to show encrypted cinema content.

thansk dave.I have test and the "bypass enigma" didn't work.
As the Dss200 in TLS mode,without secruing connection,nothing can load by Dss200.even the unencrypted DCP
This is the first time I use NEC projector,could tell me where to check the LD version.I have the DCC software.

Posted by Carsten Kurz (Member # 5396) on 11-02-2015, 08:21 PM:

Michael - for two projectors to work on a CAT862, BOTH projectors need an enigma board installed. As such, trying to bypass an Enigma board is useless, no matter if an Enigma board is installed in the projector or not. The NEC engineer obviously did not understand your problem.

Start DCC, connect to both projectors, choose display software versions, and read what it says mid-right. This is also a good time to check wether your Enigma firmware is up to date at 1.8, because earlier versions will cause problems.
If DCC only displays an Enigma software version for one of your NECs, you need to order another enigma board to retrofit the second.

- Carsten

Posted by Michael Qu (Member # 6702) on 11-02-2015, 08:34 PM:

quote:
Michael - for two projectors to work on a CAT862, BOTH projectors need an enigma board installed. As such, trying to bypass an Enigma board is useless, no matter if an Enigma board is installed in the projector or not. The NEC engineer obviously did not understand your problem.

Start DCC, connect to both projectors, choose display software versions, and read what it says mid-right. This is also a good time to check wether your Enigma firmware is up to date at 1.8, because earlier versions will cause problems.
If DCC only displays an Enigma software version for one of your NECs, you need to order another one to retrofit the second.

- Carsten

thanks Carsten,I check it.No enigma info.So it is not installed.

Posted by Marco Giustini (Member # 4544) on 11-03-2015, 05:34 AM:

Then you cannot use a DSS200 - or any Digital Cinema server - with your projectors, single or dual mode.

Posted by Marin Zorica (Member # 1716) on 11-03-2015, 04:32 PM:

Without LD, is it possible to use DSS200 in non TLS mode? As i know for series 1 there is option you can switch to non encryptior, or DH other TLS II cinelink?

Posted by Michael Qu (Member # 6702) on 11-03-2015, 05:31 PM:

quote: Marin Zorica
Without LD, is it possible to use DSS200 in non TLS mode? As i know for series 1 there is option you can switch to non encryptior, or DH other TLS II cinelink?

Yes，turn the encrypt to Off.

Posted by Marco Giustini (Member # 4544) on 11-03-2015, 06:32 PM:

yes but only with a non-dci version. Not sure it would work with a dual projector though since, as Mike said, enabling dual projector mode will also enable TLS.

Posted by Mike Renlund (Member # 4675) on 11-03-2015, 08:47 PM:

You can disable link encryption on the CAT862 Media Block in any version of software, including DCI compliant software.

Once you do that, you will not be able to select or play encrypted content. The system will only play unencrypted content. You can have the CAT862 in single projector mode at that point as you will not be using Link Encryption.

For this particular issue, you would need a Link Decryptor in both projectors to have full functionality and playback encrypted content.

Mike Renlund
Dolby Laboratories

Posted by Marco Giustini (Member # 4544) on 11-04-2015, 05:41 AM:

Thanks Mike. I keep forgetting that you can still disable the encryption on any version. I was mixing up with using non-TLS encryption.

Posted by Marin Zorica (Member # 1716) on 11-05-2015, 04:54 PM:

Just one note Mike, can we (except disabling encryption) chose between other level of security, like in older firmware version (DH, cinelink, TLS II)?

Posted by Mike Renlund (Member # 4675) on 11-05-2015, 09:51 PM:

Cinelink II DH had to be removed from the system for DCI compliance. That is really the only change from pre-DCI versions.

Posted by Michael Qu (Member # 6702) on 11-19-2015, 07:20 PM:

Hi buddy,finally I got two enigma models.The NEC engineer installed them and now the Encrypt link works.
But another issues comes.Only the projector 1 display the image,the projector 2 show green light and no image.
The left projector of the 3D system is set to 192.168.1.133 and the right progjector is set to 192.168.1.137.
In default setting of DSS200,the 192.168.1.133 is the projector1 and 137 is the projector2.In default mode the 192.168.1.133 projector works good.
Then I modified the projector1 ip setting to 192.168.1.137(projector2 to 192.168.1.133),now the 192.168.1.137 projector works good.
So both projector seen ok,but only the projector1 in DSS200 setting works,the projector2 do not.
As most use in single project 3D，the NEC engineer didn't know why this happed.
During the playback,I swap the input cable between two projectors,the image do no swap to another projector,still the projector1 has image.So I think the output of DSS200 is ok,but the projector didn't work.
Any one know something can help?Thanks

Posted by Stephan Shelley (Member # 8587) on 11-19-2015, 08:42 PM:

Make sure the cat 862 is set to dual projector. I do dual projector 3D with a pair of Christie 2220s and ZXs.

Are you saying the same projector worked with both IP address and the other projector did not ever give an image? If so you have an issue with the title configuration in the second projector or you have the HDSDI plugged into the wrong input.

Posted by Michael Qu (Member # 6702) on 11-19-2015, 10:51 PM:

quote: Stephan Shelley
Make sure the cat 862 is set to dual projector. I do dual projector 3D with a pair of Christie 2220s and ZXs.

Hi，I think the 3D setting of
Cat.862 is ok because if I turn the encryption off,both projectors show normal image.

quote: Stephan Shelley
Are you saying the same projector worked with both IP address and the other projector did not ever give an image? If so you have an issue with the title configuration in the second projector or you have the HDSDI plugged into the wrong input.

No,I mean it is which projector works normal is decided by which projector is setting as projector1 in DSS200.Only projector1 works normal,no matter which physical projector it is.

Posted by Stephan Shelley (Member # 8587) on 11-19-2015, 11:32 PM:

Check with Dolby Mediablock program that it is set to dual projector. This is different than the 3D/2D setting. If it is not it does not send cinelink keys to the second projector. When you change this setting you may need to power cycle the server.

Posted by Michael Qu (Member # 6702) on 11-20-2015, 04:12 AM:

quote: Stephan Shelley
Check with Dolby Mediablock program that it is set to dual projector. This is different than the 3D/2D setting. If it is not it does not send cinelink keys to the second projector. When you change this setting you may need to power cycle the server.

Thanks for helping.
When I try to use mediablock setup to set the CAT.862,it cannot be connected.Then I notice in the info,the CAT.862 last upgrade status is failure. So I upgrade the system and mediablock version to 4.7.2.After that,the Cat.862 is available to connect.Then enable the 3D funture. All done.Works peefect.
So the issue is cause by the failure upgrade of Cat.862.
Thanks all for you helping.